WAF Exceptions

Hi,

could you please provide more information?
Which features are enabled in the Application Protection Policy?
How did you configure the exception?

Sabine

on the main policy I know which ones to turn off to get it to work but I have attached the currently configured version.

the error i get is

Inbound Anomaly Score Exceeded (Total Score: 13, SQLi=6, XSS=): La

with status code 403

Sorry for the late response.

Could you please also post the complete log lines (with blackened domain name and IP addresses)?

2015-12-24 09:21:24

some.domain.com:9443

84.22.101.37

/sabnzbd/api

WAF Anomaly

Inbound Anomaly Score Exceeded (Total Score: 8, SQLi=1, XSS=): Last Matched Message: Restricted SQL Character Anomaly Detection Alert - Total # of special characters exceeded

403

772

3355

17071

7

2015-12-24 09:21:24

some.domain.com:9443

84.22.101.37

/sabnzbd/api

WAF Anomaly

Inbound Anomaly Score Exceeded (Total Score: 8, SQLi=1, XSS=): Last Matched Message: Restricted SQL Character Anomaly Detection Alert - Total # of special characters exceeded

403

772

3355

17071

7

Hi,

please put an asterisk at the end of your exception path:
'/sabnzbd/api*'

Please try again.

Sabine

seems to have worked. Thank you!

You're welcome.

It should be also enough if you only skip 'SQL Injection Attacks' in your exception.